Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa
File:                     2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa (raw, json)
Hash identifier:          YBTEpgI7RG7xSfI2Fv99sov4x9771pZZGXGMDJQxrU8=
Subject key identifier:   2A:47:C6:66:43:8D:18:51:B4:52:12:BA:C6:24:A7:D0:6F:C8:FE:A2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858456822E7226BEFCD68BB037040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa
Signing time:             Tue 02 Apr 2024 01:00:26 +0000
ROA not before:           Tue 02 Apr 2024 01:00:26 +0000
ROA not after:            Mon 01 Jul 2024 01:00:26 +0000
asID:                     211440
IP address blocks:        108.165.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:22:e7:22:6b:ef:cd:68:bb:03:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  2 01:00:26 2024 GMT
            Not After : Jul  1 01:00:26 2024 GMT
        Subject: CN=4a328bc2-fae6-4023-a478-3798391b7cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a4:52:b4:68:16:53:64:76:7e:f0:df:83:00:
                    49:c4:8a:40:1c:79:d0:ba:15:d6:6b:b4:56:49:91:
                    a4:2a:65:e1:6f:4d:a5:b5:96:44:28:42:52:71:13:
                    eb:1c:3c:44:9f:e4:a2:5b:37:61:b5:bc:14:e8:ca:
                    c6:f7:2d:a5:03:00:aa:23:ac:7a:31:58:45:3a:ed:
                    d0:52:9b:b1:82:12:8a:60:ad:0d:59:33:c3:8a:16:
                    1c:ca:5e:47:ed:62:b0:e5:20:d4:d7:6f:e2:bb:48:
                    0c:a1:a6:f2:26:99:a8:53:8d:14:16:13:e7:84:18:
                    0e:58:c4:02:f4:98:2c:1c:ec:97:79:b8:40:9e:72:
                    91:e3:06:85:f1:57:65:6c:62:ff:92:da:ad:af:8f:
                    69:e6:99:7e:a9:2a:16:37:1d:cb:a3:d3:3f:3c:29:
                    e2:84:fc:d3:37:f3:d6:f0:02:fe:93:da:41:03:0a:
                    14:c2:b9:ad:b0:2c:ec:97:ed:f9:32:28:78:45:4b:
                    28:87:9a:5f:5f:fa:34:49:6a:ff:d6:b6:73:d8:c7:
                    8f:b2:a3:38:d2:1b:1f:8a:0b:d9:79:4c:9f:62:78:
                    3b:47:52:2f:cd:5d:60:02:dd:a9:16:3c:1d:95:12:
                    32:f1:12:2b:38:93:7b:6b:1c:4f:49:82:70:1e:7f:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:47:C6:66:43:8D:18:51:B4:52:12:BA:C6:24:A7:D0:6F:C8:FE:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:51:1c:14:d1:35:0c:91:08:9d:63:a7:81:f7:95:8b:c8:f2:
         38:ed:6e:9c:45:14:c5:58:7a:47:fb:28:b5:62:43:61:ec:24:
         49:ae:d0:21:7c:db:7e:1a:b5:f2:96:dc:b8:25:3e:00:1f:34:
         ed:9b:e3:4b:1c:87:88:be:26:77:3a:98:eb:ae:cf:62:2d:12:
         31:bf:5e:b4:2d:ec:cf:25:fc:46:0f:2e:72:6a:a6:4b:47:3e:
         f9:a7:11:b5:e4:8e:59:03:c8:c8:eb:ad:6a:c2:54:0c:db:2e:
         47:6c:10:fe:3b:c7:bd:db:33:fc:e0:d3:c3:f5:18:ac:a1:b8:
         f2:0a:f2:16:96:07:1c:31:15:76:e2:b3:03:07:82:47:d3:6c:
         57:a2:98:23:8f:06:3a:64:e5:34:ce:d8:71:ce:2c:4c:1c:e7:
         35:b4:3e:6b:d7:d7:01:40:b5:ab:c9:7a:40:62:41:8f:dd:8d:
         39:b4:d9:fb:d0:ce:30:bd:6c:d4:ba:61:65:10:ab:f6:87:04:
         f6:14:e8:e9:48:b0:07:6a:85:36:c3:4c:94:04:99:b9:29:aa:
         bd:3b:be:41:b3:11:5b:8f:72:c6:4f:99:1f:3e:28:06:02:5c:
         90:52:61:1e:72:9f:28:42:19:72:23:c8:b3:47:0b:fb:a7:a0:
         89:04:6d:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVoIucia+/NaLsDcEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQwMjAxMDAyNloXDTI0MDcwMTAxMDAyNlowLzEtMCsGA1UEAxMk
NGEzMjhiYzItZmFlNi00MDIzLWE0NzgtMzc5ODM5MWI3Y2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKRStGgWU2R2fvDfgwBJxIpAHHnQuhXWa7RW
SZGkKmXhb02ltZZEKEJScRPrHDxEn+SiWzdhtbwU6MrG9y2lAwCqI6x6MVhFOu3Q
UpuxghKKYK0NWTPDihYcyl5H7WKw5SDU12/iu0gMoabyJpmoU40UFhPnhBgOWMQC
9JgsHOyXebhAnnKR4waF8VdlbGL/ktqtr49p5pl+qSoWNx3Lo9M/PCnihPzTN/PW
8AL+k9pBAwoUwrmtsCzsl+35Mih4RUsoh5pfX/o0SWr/1rZz2MePsqM40hsfigvZ
eUyfYng7R1IvzV1gAt2pFjwdlRIy8RIrOJN7axxPSYJwHn8czwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCpHxmZDjRhRtFISusYkp9BvyP6iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmVmYzdkMzctMWZlMi0z
ZjAzLTg5NTktZTkwM2ZlZjlmNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdRHBTRNQyRCJ1jp4H3lYvI8jjtbpxFFMVYekf7KLViQ2HsJEmu0CF8
234atfKW3LglPgAfNO2b40sch4i+Jnc6mOuuz2ItEjG/XrQt7M8l/EYPLnJqpktH
PvmnEbXkjlkDyMjrrWrCVAzbLkdsEP47x73bM/zg08P1GKyhuPIK8haWBxwxFXbi
swMHgkfTbFeimCOPBjpk5TTO2HHOLEwc5zW0PmvX1wFAtavJekBiQY/djTm02fvQ
zjC9bNS6YWUQq/aHBPYU6OlIsAdqhTbDTJQEmbkpqr07vkGzEVuPcsZPmR8+KAYC
XJBSYR5ynyhCGXIjyLNHC/unoIkEbaU=
-----END CERTIFICATE-----
Generated at Sat May 4 02:06:25 2024 by rpki-client on console-ams.rpki-client.org